Mikrotik RouterOS buffer overflow

ssh daemon buffer overflow...

MikroTik RouterOS - sshd (ROSSSH) Remote Heap Corruption

During an audit the Mikrotik RouterOS sshd ROSSSH has been identified to have a remote previous to authentication heap corruption in its sshd component. Exploitation of this vulnerability will allow full access to the router device. This analysis describes the bug and includes a way to get...

MikroTik RouterOS - sshd (ROSSSH) Remote Heap Corruption

MikroTik RouterOS - sshd ROSSSH Remote Heap Corruption During an audit the Mikrotik RouterOS sshd ROSSSH has been identified to have a remote previous to authentication heap corruption in its sshd component. Exploitation of this vulnerability will allow full access to the router device. This...

CVE-2012-6050

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service CPU consumption, read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll...

Cross site request forgery (csrf)

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service CPU consumption, read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll...

CVE-2012-6050

CVE-2012-6050 affects MikroTik RouterOS where the winbox service (RouterOS 5.15 and earlier) is exploitable. An attacker can remotely trigger a denial of service by consuming CPU, and may read the router version, with possible additional impacts via a request to download the router’s DLLs or plug...

CVE-2012-6050

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service CPU consumption, read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll...

MikroTik RouterOS Winbox Detection

The remote port is used by Winbox, a remote management tool, to administer devices running MikroTik RouterOS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59731; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Mikrotik Router Remote Denial Of Service

Exploit for hardware platform in category dos / poc !/usr/bin/python Exploit Title: Mikrotik Router Remote Denial Of Service attack Date: 19/4/2012 Author: PoURaN @ 133tsec.com Software Link: http://www.mikrotik.com Version: All mikrotik routers with winbox service enabled are affected still a 0d...

Mikrotik Router - Denial of Service

Mikrotik Router - Denial of Service !/usr/bin/python Exploit Title: Mikrotik Router Remote Denial Of Service attack Date: 19/4/2012 Author: PoURaN @ 133tsec.com Software Link: http://www.mikrotik.com Version: All mikrotik routers with winbox service enabled are affected still a 0day 30/5/2012...

Mikrotik Router - Denial of Service

!/usr/bin/python Exploit Title: Mikrotik Router Remote Denial Of Service attack Date: 19/4/2012 Author: PoURaN @ 133tsec.com Software Link: http://www.mikrotik.com Version: All mikrotik routers with winbox service enabled are affected still a 0day 30/5/2012 Tested on: Mikrotis RouterOS 2.9.6 up t...

CVE-2008-6976

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

Cross site request forgery (csrf)

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

CVE-2008-6976

Summary of CVE-2008-6976 : MikroTik RouterOS versions 3.x (3.0–3.13) and 2.x (2.0–2.9.51) are vulnerable to an improper input validation vulnerability in SNMP handling that allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request. This can enable u...

EUVD-2008-6935

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

CVE-2008-6976

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

MikroTik RouterOS with Blank Password (HTTP)

The remote host is running MikroTik RouterOS without a password for its 'admin' account. Anyone can connect to it and gain administrative access to it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39420; scriptversion"1.20"; scriptcvsdate"Date: 2018/11/15 20:50:25"...

MicroTik RouterOS <= 3.13 SNMP write (Set request) PoC

No description provided by source. / -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' | ' | / | ' \ - |||||||\|||, |||// hellknights.void.ru |/ .0x48k...

MicroTik RouterOS SNMP安全绕过漏洞

BUGTRAQ ID: 31025 CNCAN ID：CNCAN-2008090606 MicroTik RouterOS是一款将标准的PC变为网络路由器使用的解决方案。 MicroTik RouterOS不正确处理SNMP请求，远程攻击者可以利用漏洞绕过安全限制，更改NMS中的部分配置。 MicroTik RouterOS 2.9.51 MicroTik RouterOS 2.9.50 MicroTik RouterOS 2.9.49 MicroTik RouterOS 2.9.48 MicroTik RouterOS 2.9.47 MicroTik RouterOS 2.9.46...

microtik-poc.txt

/ -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' SNMP Service General Information Summary ... RouterOS supports only Get, which means that you can use this implementation only for network monitoring. The MikroTik Router...